Business Analyst – IAM/PAM

Business Analyst – IAM/PAM L2

Years of Experience

• 4 - 6 years of experience in planning, designing, implementing, and supporting Identity Governance & Administration (IGA) and Single Sign-On (SSO) programs across enterprise environments.
• Expertise in gathering business requirements, stakeholder management, process analysis, governance documentation, and supporting IAM transformation initiatives.

General Description

• Act as a liaison between business stakeholders, security teams, application owners, IAM teams, and technical implementation teams to gather, analyze, document, and validate IGA and SSO requirements.
• Support IAM transformation initiatives by conducting requirement analysis, impact assessments, process mapping, business process optimization, and governance reviews.
• Facilitate workshops, stakeholder interviews, and discovery sessions to identify access governance, identity lifecycle, authentication, and federation requirements.
• Collaborate with customers and technical teams to support User Acceptance Testing (UAT), reporting, implementation planning, and change management activities.
• Prepare business requirement documents, functional specifications, workflows, dashboards, reports, and governance documentation supporting IGA and SSO programs.

Technical Requirements

• Good understanding of Identity Governance & Administration (IGA) concepts including Joiner-Mover-Leaver processes, Role-Based Access Control (RBAC), access request management, certifications, SoD controls, and entitlement governance.
• Understanding of Single Sign-On (SSO), federation protocols, and authentication technologies including SAML, OAuth 2.0, OpenID Connect (OIDC), and MFA.
• Experience gathering, documenting, validating, and managing business, functional, and non-functional requirements for IAM projects.
• Ability to create and maintain BRDs, FRDs, user stories, use cases, process maps, workflow diagrams, and traceability matrices.
• Knowledge of IGA platforms such as Microsoft Entra ID Governance, Saviynt, or comparable solutions.
• Understanding of SSO platforms such as Microsoft Entra ID, Okta, Ping Identity, or similar technologies.
• Experience performing stakeholder analysis, gap assessments, process improvement initiatives, and governance reviews.
• Familiarity with IAM compliance requirements and frameworks including SOX, HIPAA, PCI-DSS, ISO 27001, GDPR, NIST, and CIS.
• Experience supporting application onboarding, access certification campaigns, role mining, access reviews, and federation integrations.
• Ability to support UAT planning, test scenario creation, defect tracking, requirement validation, and implementation support.
• Strong reporting and analytical skills with the ability to develop dashboards, KPIs, governance metrics, and executive reports.

Soft Skills

• Strong analytical, problem-solving, and critical-thinking abilities with attention to detail.
• Excellent verbal and written communication skills with the ability to effectively engage business stakeholders, security teams, and technical teams.
• Strong stakeholder management, facilitation, and coordination skills with the ability to manage multiple priorities and deadlines.
• Adaptable, proactive, and customer-focused mindset with a commitment to continuous improvement and quality deliverables.

Certifications (Preferred)

• Certified Business Analysis Professional (CBAP)

Educational Qualifications

• University degree in IT or/and IT Security